Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: rAScbdVX4KW0qlZ+UzTxt8+oSOBwEauoWNGLXXm3/8A=
Subject key identifier: 81:B1:7C:B2:5E:14:FE:F4:77:22:4A:7B:EA:6D:69:28:36:2F:C5:D0
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019EB76AE2248E9AC6D2857247999C8AA79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 16:01:35 +0000
Manifest this update: Thu 11 Jun 2026 16:01:35 +0000
Manifest next update: Fri 12 Jun 2026 16:01:35 +0000
Files and hashes: 1: 2D2Vo659VCE7_dNsyKDY_ySnp_s.roa (hash: LZcXs72e2WHugD8ordyBZAMfRGav21lT1gfAGNPJNRQ=)
2: K-3AW1zodZQo96foEv6vSPWnznA.roa (hash: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI=)
3: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: vrTXPdSCwKzOVNtIChHGOFxwIiO7EZLZXcQ0SDg+vjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:e2:24:8e:9a:c6:d2:85:72:47:99:9c:8a:a7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Jun 11 16:01:35 2026 GMT
Not After : Jun 12 16:01:35 2026 GMT
Subject: CN=81b17cb25e14fef477224a7bea6d6928362fc5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:0a:9f:a9:68:5f:e1:47:45:30:f7:38:d4:
62:e6:e5:20:4a:a9:79:77:97:5d:a3:ce:d7:d6:53:
7e:f7:0c:c3:bd:90:66:65:29:da:c0:7a:c3:9b:eb:
54:30:14:79:3a:de:4f:03:ba:6d:2f:92:5e:29:71:
67:23:b7:83:2d:37:45:1c:b2:f8:c5:97:f7:86:68:
0f:a8:f6:30:e1:8b:85:ab:86:3e:c2:02:3b:3f:d3:
ff:03:ac:37:be:c5:2b:b1:30:5f:e2:98:c9:09:2d:
41:9e:98:74:94:93:a7:ff:ee:ef:88:03:1f:bf:c6:
53:a9:11:ea:86:0b:e3:f5:e9:bb:4c:b0:bb:f4:ec:
30:dc:e1:12:40:66:ef:16:b2:00:f9:d7:8d:6f:41:
fd:8b:84:e9:fd:bf:4c:54:ee:23:8f:85:09:4b:f6:
17:4a:28:ae:c5:2d:66:d1:e1:70:52:da:00:7f:f8:
f2:8e:6a:93:a5:e7:ed:44:46:24:52:ef:e7:60:4d:
b1:f6:37:24:d7:62:60:00:c6:49:aa:0e:df:21:73:
c7:29:0f:42:6e:3d:9d:de:e8:9f:97:17:95:60:6d:
69:04:b8:c7:01:c0:db:95:65:76:b5:f7:76:12:3a:
22:57:5b:98:8a:8a:c2:67:b6:91:b2:12:a2:cf:89:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B1:7C:B2:5E:14:FE:F4:77:22:4A:7B:EA:6D:69:28:36:2F:C5:D0
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9c:64:71:1e:a1:fc:9e:57:ab:7d:a0:87:77:bd:12:ff:ed:
31:a6:23:1c:72:a0:c9:f7:21:5e:96:86:6e:57:6a:cd:b6:25:
13:03:ec:c7:de:1b:03:f4:a4:f8:ed:db:c2:06:fd:1a:cc:b8:
c9:5a:2c:94:62:e4:b3:9f:f5:50:72:ca:8b:d9:05:ba:3c:20:
a2:f7:91:ec:b1:3b:04:2c:85:db:bd:0e:27:eb:38:fe:26:39:
a6:8b:90:c9:d0:21:5b:c1:16:14:90:91:c8:bc:c8:25:33:04:
00:c7:ba:c9:61:20:f6:89:15:07:d3:39:78:d5:91:b5:ac:32:
2f:26:75:e1:e6:dc:58:24:d8:75:82:b6:77:52:10:23:58:62:
cc:8c:c2:ec:65:16:63:d7:96:d2:47:1d:59:54:92:06:a3:0f:
ec:8b:b8:cc:18:b4:80:c8:92:1d:b2:fb:66:85:32:ed:2f:b0:
be:e4:fd:a1:5a:de:83:9e:81:c8:50:16:c7:e7:f8:0b:b0:8e:
f5:bb:cc:d0:52:4f:f8:78:87:0b:92:42:39:69:79:ee:4a:3d:
58:d7:63:74:85:ad:23:06:50:57:02:f8:92:84:fd:82:4c:f7:
b0:8b:1e:df:fa:43:0b:18:b7:e7:45:f1:98:46:8e:6d:fe:e8:
c3:bf:00:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:13:06 2026 by rpki-client